CVE-2008-7292
Last modified
CVE-2008-7292 is a vulnerability of currently unknown severity. Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Bugzilla | 2.20 |
| Mozilla | Bugzilla | 2.20.1 |
| Mozilla | Bugzilla | 2.20.2 |
| Mozilla | Bugzilla | 2.20.3 |
| Mozilla | Bugzilla | 2.20.4 |
| Mozilla | Bugzilla | 2.22 |
| Mozilla | Bugzilla | 2.22.1 |
| Mozilla | Bugzilla | 2.22.2 |
| Mozilla | Bugzilla | 3.0 |
| Mozilla | Bugzilla | 3.0.0 |
| Mozilla | Bugzilla | 3.0.1 |
| Mozilla | Bugzilla | 3.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-7292?
How severe is CVE-2008-7292?
How do I fix CVE-2008-7292?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-7286IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domin…
- CVE-2008-7287Multiple memory leaks in the (1) ldap_init and (2) ldap_url_…
- CVE-2008-7288IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITD…
- CVE-2008-7289IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITD…
- CVE-2008-7290Memory leak in the ldap_explode_rdn API function in IBM Tivo…
- CVE-2008-7291gri before 2.12.18 generates temporary files in an insecure …9.8
- CVE-2008-7293Mozilla Firefox before 4 cannot properly restrict modificati…
- CVE-2008-7294Google Chrome before 4.0.211.0 cannot properly restrict modi…
- CVE-2008-7295Microsoft Internet Explorer cannot properly restrict modific…
- CVE-2008-7296Apple Safari cannot properly restrict modifications to cooki…
- CVE-2008-7297Opera cannot properly restrict modifications to cookies esta…
- CVE-2008-7298The Android browser in Android cannot properly restrict modi…
Are you affected by CVE-2008-7292?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST